Baei Inc. (“Bae-i,” “we,” “us,” or “our”) values your privacy. This Privacy Policy explains how we collect, use, share, and protect information when you use our platform.
Depending on the activity, Bae-i assumes the role of a “data controller” (when we determine the purposes and means of processing) and/or “data processor” or “service provider” (when we process data on behalf of creators or enterprise clients). For more details about our privacy practices, including our role and the specific Bae-i entity responsible under this Policy, please visit our Privacy Center.
In the event of any conflict between this Privacy Policy and any creator licensing terms, this Privacy Policy governs our processing of Personal Data unless a Data Processing Addendum explicitly overrides it. For enterprise customers, any applicable contract or Data Processing Addendum will govern in the event of a conflict with this Privacy Policy.
1. INFORMATION WE COLLECT
1.1 Information You Provide Directly
Account Data: Name, email, password, country, age confirmation, and profile preferences.
Payment Information: Processed by payment processors and app marketplace billing providers. We do not store full card numbers.
Profile Preferences: Favorite avatars, interaction history, and personalization settings.
Communications: Support tickets, feedback, survey responses, and correspondence with us.
1.2 Creator Information
Application Data: Name, email, social media handles, and biographical information.
Content: Videos, audio recordings, images, scripts, and documents for avatar training.
Public Data: Social media follower counts and public posts (with consent).
Financial: Banking details for revenue payments.
Reference Materials: Recordings, scripts, images, and other materials provided during the avatar creation process.
Creators are solely responsible for ensuring they have obtained any necessary rights, waivers, or permissions to submit third party likenesses or content.
1.3 Content You Create and Share
Bae-i is built around AI driven conversational and video Avatars. When you interact with Avatars on Bae-i, we collect and store the full content of those interactions, including:
•
Your prompts and text messages
•
Audio inputs, generated outputs, and session media artifacts from voice and video sessions where available
•
Edits and corrections you make
•
Responses generated by the Avatars
•
Media you choose to upload
We use this information to operate the Services, customize and personalize your experience, improve our Services, maintain a safe and secure environment, support creators, and comply with legal requirements. We do not train AI models on your conversations or interaction data.
Bae-i does not monitor or view your communications in real time. However, your interactions are stored and may be accessed under the limited circumstances described in Section 2.4 (Human Review and Quality Assurance) and Section 3.4 (Legal Requirements).
Recording Disclosure: Avatar interactions are recorded or otherwise stored as part of operating the Services. By initiating a text, voice, or video interaction, you acknowledge and consent to Bae-i and its authorized service providers storing and processing transcripts, conversation memory, session metadata, and any audio or video artifacts that we or our providers generate or retain for that interaction. Users should not expect avatar interactions to be private from Bae-i or its authorized service providers.
1.4 Conversation and Session Data
Conversation Transcripts: Complete records of your avatar interactions.
Conversation Memory: Accumulated context from your sessions with each avatar.
Session Artifacts: Session timestamps, duration, technical diagnostics, safety signals, and audio or video files or provider-generated artifacts where available.
Quality Evaluations: AI generated assessments of interaction quality for service improvement.
Session Context: Classification of session types (e.g., general, educational).
1.5 Metadata
In addition to message content, we collect metadata related to your interactions. This includes timestamps, duration and frequency of sessions, system performance logs, error reports, device signals, and safety triggers relevant to the functionality of the Services.
Metadata helps us diagnose system issues, maintain platform integrity, detect abuse, and understand how features are used. Metadata is collected in addition to, not instead of, stored interaction content.
1.6 Automatically Collected Information
Usage Data: Avatar interactions, session duration, tokens consumed, actions taken, and feature usage.
Device Information: Browser type, operating system, device model, device identifiers, app version, and time zone.
Log Data: IP address, access times, pages viewed, and network connection information.
Approximate Location: Country, region/state, and other coarse location signals inferred from IP address or similar network metadata to apply regional legal disclosures, safety rules, fraud controls, and analytics. We do not collect precise device GPS location for avatar sessions.
Analytics: App performance metrics, user flows, and engagement patterns.
We collect this information even if you access Bae-i without an account.
1.7 Biometric Data
We may collect biometric identifiers and information, including:
Voice Characteristics: Patterns derived from voice interactions.
Speech Patterns: Linguistic characteristics from conversations.
Facial Data: Geometry data from video avatar interactions (creators only).
Biometric Retention Schedule
Bae-i retains the right to store biometric data for the periods specified below, though we may delete data earlier when no longer needed for operational purposes:
•
Raw biometric signals (original audio, video, or images used for biometric processing): Retained for up to 3 years from your last interaction, or shorter where required by jurisdictional law.
•
Biometric derived data (embeddings, feature vectors, or other non reversible representations): Retained for up to 3 years from your last interaction for security, fraud prevention, and safety purposes, or shorter where required by jurisdictional law.
•
Illinois residents (BIPA): All biometric identifiers and biometric information are deleted within 3 years of the individual’s last interaction, as required by law.
•
Deletion triggers: Data is deleted upon the earliest of (a) the applicable retention period expiration, (b) your deletion request, or © account termination.
Bae-i does not sell, lease, trade, or profit from biometric identifiers or biometric information.
State Specific Biometric Privacy Rights
Illinois Residents (BIPA):
•
Written release required before collection (provided via in app consent)
•
Disclosure of specific purpose: Avatar interaction services
•
Retention schedule: Up to 3 years after last interaction
•
We do not sell or profit from your biometric data
•
Private right of action available for violations
•
Deletion request: legal@baei.ai
•
Informed consent required before capture
•
Retention schedule and destruction policy disclosed above
•
Prohibition on sale of biometric data
•
Deletion request: legal@baei.ai
Washington Residents (WMPA):
•
Notice and consent required for commercial biometric purposes
•
Disclosure of retention period: Up to 3 years after last interaction
•
Destruction timeline: Within 30 days of retention period expiration
•
Deletion request: legal@baei.ai
1.8 Third Party Data
Social Login: Profile information from social login or other authentication providers. We do not receive your social media passwords or full authentication credentials.
Payment Processors: Transaction confirmations and payment status.
Social Media APIs: Public profile data (for creators, with consent).
Analytics and Advertising Partners: Device identifiers, demographic signals, and information about your interactions with Bae-i ads.
Connecting your account through a third party account is completely optional. You can revoke permission by logging into the third party account and disconnecting Bae-i. If you revoke permission, we may retain information we collected previously, but the accounts will not be linked going forward.
1.9 Cookies and Similar Technologies
We use cookies, SDKs, web beacons, pixels, local storage, and similar technologies to collect information about your use of the Services. These technologies help us operate the platform, maintain sessions, remember settings, deliver features, measure usage, detect fraud, and support marketing.
We also use tracking pixels and click-redirect URLs in some of the emails we send, including creator outreach, transactional notifications, and reminders, to understand whether messages are received, opened, and acted on. Email addresses are stored as pseudonymous (hashed) identifiers when shared with our analytics processors; we do not transmit raw email addresses for these analytics. Recipients in the EU, UK, and EEA are excluded from pixel and click-redirect tracking unless we have obtained your consent. You can opt out of all marketing emails at any time using the unsubscribe link in any commercial message we send, or by emailing legal@baei.ai.
You can control cookie preferences in your browser settings, although disabling them may limit functionality. For more information, including the current inventory, retention posture, and legal basis by category, see our Cookie Policy.
1.10 Subprocessors
We rely on third-party service providers (analytics, cloud infrastructure, payment processing, communications, AI model hosting, and similar) to operate the Services. A current list of our subprocessors — including each provider’s name, purpose, and processing location — is available on request by emailing legal@baei.ai. We provide updated lists on reasonable request and notify customers under active data processing agreements of material subprocessor changes.
2. HOW WE USE INFORMATION
2.1 Service Provision
•
Create and manage your account
•
Authenticate your identity
•
Process payments and token purchases
•
Enable avatar interactions and deliver personalized responses
•
Send transactional emails and service notifications
•
Administer subscriptions and creator tools
2.2 Personalization
Your interactions with Avatars, your preferences, interests, activity patterns, and device context help us tailor suggestions, content, features, and creator offerings. This may include proposing Avatars you might enjoy, adjusting responses based on your conversation style, or offering recommended features based on your usage.
2.3 How Our AI Systems Use Data
We do not train AI models on your conversations or interaction data. The AI models that power Avatar conversations are operated by external providers on an inference-only basis — your messages, audio, and video are processed to generate responses in real time, not to train models. If this ever changes, we will update this Privacy Policy and provide you the opportunity to opt out before any training begins.
There are two narrow ways your data is used beyond the immediate session:
•
Conversation memory: When you interact with an Avatar, we derive internal representations (such as embeddings) from your conversations to power your personal conversation memory feature — so an Avatar can remember context across your own sessions. This memory is specific to you, is not shared with other users, is not used to train models, and is deleted when you clear your conversation history or delete your account.
•
Dedicated creator models: For creators only, content you intentionally provide for avatar creation (recordings, documents, knowledge base materials) is used to build your own dedicated voice clone, video avatar, and knowledge base under your Creator Licensing Agreement. These dedicated models are built only from your provided content and are deleted upon termination, as described below.
Bae-i does not use model derived representations to profile individuals for marketing, credit, housing, insurance, or employment decisions.
How Deletion Works for AI Systems
When you request deletion of your data:
•
We delete your information from our active databases and storage systems, and it ages out of encrypted backups in accordance with our retention schedule
•
Conversation memory (the derived representations used to personalize your sessions) is deleted along with your conversation history
Bae-i operates two types of AI model relationships, which are handled as follows upon deletion or termination:
Dedicated Creator Models (voice clones, video avatar models, knowledge bases): These models are specific to individual creators and are fully deleted upon termination of a Creator Licensing Agreement. Because each creator has their own dedicated models, no “unlearning” limitation applies. The voice model, video avatar, and knowledge base are permanently removed within 30 days of termination.
Shared Platform Systems (safety classifiers, quality scoring, foundation conversation models): These systems are not trained on individual user or creator content. Deleting your data therefore requires no model “unlearning” — there is nothing of yours inside them to remove.
For Users: Your identifiable data is deleted from our systems upon request, including conversation history and conversation memory.
For Creators: Upon termination, your dedicated avatar models (voice clone, video avatar, knowledge base) are fully deleted within 30 days. See your Creator Licensing Agreement Section 2.4 for full details.
2.4 Human Review and Quality Assurance
While most processing is automated, there are limited circumstances where human review may occur:
•
When you contact support and share content we need to review to resolve your issue
•
When our safety systems flag interactions for potential policy or legal violations
•
When we perform targeted quality checks or audits on model outputs or safety performance
•
When required for legal compliance or dispute resolution
Where human review is used, access is limited to trained personnel under confidentiality obligations and strict access controls. We log access to such content and restrict use to specific purposes (safety, support, quality assurance, compliance, and debugging).
Human reviewers cannot access user content on demand or browse accounts. Access is granted only for specific, logged workflows such as safety escalations, support tickets, or required audits. Human reviewers are prohibited from downloading, copying, or exporting any user content outside Bae-i’s secure review environment.
We do not use human reviewers to read user content for general marketing, profiling, or advertising purposes.
2.5 Safety and Security
We use collected information to:
•
Detect and prevent misuse, fraud, harmful content, and unauthorized access
•
Prevent abuse of our Services and violations of our policies
•
Analyze patterns in messages or signals to prevent malicious activity
•
Secure our IT systems and protect creators’ intellectual property
•
Maintain system and network integrity
•
Comply with legal obligations
Where permitted by law, we may use both automated and manual processes to review potential violations.
2.6 Communications
We communicate with you to provide service updates, new features, security alerts, product announcements, and policy changes. We also respond to your support inquiries and provide troubleshooting assistance.
You can choose whether to receive promotional communications from us.
2.7 Analytics and Research
We analyze usage trends, system performance, aggregated behavior, and product interactions to understand how people use Bae-i and improve our Services.
We may aggregate or anonymize information and use the aggregated or anonymized data for research, marketing, and product development purposes. To the extent we anonymize data so that it is no longer reasonably linkable to an individual, we maintain and use such data in de identified form and will not attempt to re identify it (except to confirm it is properly de identified, where permitted by law).
2.8 Legal Compliance and Business Operations
We may use your information to comply with legal obligations, meet contractual requirements, support audits, manage business processes, and evaluate or facilitate corporate transactions such as financing, mergers, or acquisitions.
3. INFORMATION SHARING
3.1 Sharing on Bae-i
When you interact with Avatars, the content is not publicly visible to other users unless you choose to share it. If you publish content, engage in community features, or use collaborative tools, the audience you select can view that content.
3.2 Sharing with Creators
Creators receive aggregated information about how their Avatars are used, such as:
•
Engagement metrics and session counts
•
Popularity trends and performance data
Creators do not receive personal identifiers, transcripts, or user content unless:
•
You choose to share it directly
•
A specific feature clearly discloses such sharing
•
We are compelled to do so by law
Bae-i does not expose your private Avatar conversations to creators unless you explicitly provide them or unless required by law. Creators’ access to analytics is limited to aggregated and/or de identified data designed to help them understand performance, not individual user behavior.
Bae-i may refuse or limit creator requests for user content if the request conflicts with user privacy rights, platform safety obligations, or applicable law.
Creators act as independent controllers for any data they receive directly from you.
3.3 Service Providers
We share data with service providers who help us operate Bae-i, including:
•
Cloud infrastructure providers: Data hosting, storage, and computing
•
Payment processors: Secure payment handling
•
AI voice synthesis and video generation providers: Voice and video generation for avatar interactions
•
AI language model providers: Natural language processing and responses
•
Email delivery providers: Transactional email sending
•
Analytics providers: Usage analytics and service improvement
•
Security and fraud prevention firms: Protecting the platform and users
•
Content moderation vendors: Safety and policy enforcement
For voice, video, and AI features, these categories include third-party AI voice, video, language, cloud infrastructure, analytics, and security providers. We identify service providers by category in this consumer-facing Policy and maintain processor details internally for legal, security, audit, and enterprise review purposes.
These providers may process information on our behalf under strict contractual controls and may only use the information as instructed by Bae-i. Service providers are prohibited from selling or sharing Personal Data or using it for their own purposes.
3.4 Legal Requirements
We may disclose information to law enforcement, regulators, or other authorized parties if required by law or when we believe in good faith that disclosure is necessary to:
•
Comply with laws or legal process
•
Protect our rights, property, or safety
•
Protect the rights, property, or safety of users, creators, or the public
•
Prevent fraud or security issues
•
Defend or enforce our Terms of Service, Community Guidelines, or other policies
3.5 Business Transfers
In case of merger, acquisition, sale of assets, restructuring, investment, or financing, information may transfer to the new owner or party. Any such transfer will be consistent with this Policy and subject to appropriate confidentiality protections.
3.6 Aggregated Data
We may share anonymized, aggregated data that does not identify individuals for research, marketing, and other purposes.
3.7 Advertising and Analytics
We may share personal information with advertising and analytics providers to deliver tailored advertising, monitor ad performance, provide analytics services, and improve our Services.
These entities may use cookies and tracking technologies. You may opt out of targeted advertising through your browser, account settings, or our Privacy Center.
3.8 Other Disclosures
We may make additional disclosures of your information when you direct us to do so, such as when you refer our Services to others or choose to make content public.
4. DATA RETENTION
4.1 General Retention Principles
We retain information for as long as necessary to provide the Services, comply with legal obligations, maintain security, resolve disputes, and support business operations. Bae-i retains the right to store data for the maximum periods specified below, though we may delete data earlier when no longer needed for operational purposes.
4.2 Retention Guidelines
Avatar Interactions (including conversation content): Retained for up to 5 years from your last interaction or deleted sooner if you delete your account, unless longer retention is required for safety, fraud prevention, legal obligations, or dispute resolution.
Account Data: Retained while your account remains active.
Closed Accounts: Personal information is deleted within 30 days unless required for legal, tax, audit, or safety obligations. Backups are retained on a rolling schedule not exceeding 365 days, encrypted, and not accessible for production use; deleted records age out of backups as that schedule completes.
Payment processors retain transaction records in accordance with their own data protection agreements and applicable financial regulations; we cannot delete payment records held by our payment processors.
Transaction Records: 7 years (legal requirements).
Conversation Memory: Deleted with account deletion.
Biometric Data: See Section 1.7 for specific retention periods.
Analytics Data: Anonymized and may be kept indefinitely.
Aggregated or Anonymized Data: May be retained indefinitely, as it no longer identifies you.
4.3 Creator Data
Creator content (including training materials, recordings, and associated data) is retained while the creator agreement is active. Upon termination, creator content and dedicated creator models are deleted from production systems within 30 days, subject to any limited wind down needed to complete obligations already accepted before termination.
Bae-i may retain limited copies in encrypted backups, which are kept on a rolling schedule not exceeding 365 days and are not accessible for production use. Minimal records may also be retained where required for tax, fraud prevention, dispute resolution, or legal compliance. Shared platform systems are not trained on creator content, so no residual creator data remains in them after termination.
4.4 Clear Conversation History
You may request deletion of your conversation history at any time via your profile settings or by contacting legal@baei.ai. This will delete all transcripts and accumulated conversation memory while preserving your account.
4.5 Legal Preservation
In certain circumstances, such as legal requests, regulatory investigations, or safety incidents, we may preserve information longer as required. Where we retain Personal Data for longer periods as permitted by law, we apply additional safeguards including access restriction and purpose limitation.
5. AVATAR CREATION
If you create an Avatar that is made available to other users, different rules apply depending on whether the Avatar is based on you personally or is fictional:
5.1 Avatars Based on Your Real Identity
Avatars that use your real name, recognizable face, voice, or biographical details in a way that identifies you are considered personal avatars. If you delete your account or exercise a right to deletion under applicable laws, we will remove and deactivate that Avatar from the Services.
For creators with active licensing agreements, avatar deactivation occurs following the wind down period specified in Section 4.3.
Limited retention may still apply where required by law, safety concerns, fraud prevention, or dispute resolution. We will not keep your personally identifying Avatar active for other users once you have requested deletion (or, for creators, once the wind down period has concluded).
For Avatars based on real individuals, Bae-i requires verification that the creator has obtained appropriate rights, permissions, and licenses to use that likeness.
5.2 Fictional or Non Personal Avatars
Fictional Avatars (invented characters that do not directly or indirectly identify you) may be preserved and kept active on the Services even if you delete your account. We do this to avoid impacting the experience of other users who may have engaged with that Avatar.
To ensure we do not retain information about you when we preserve a fictional Avatar, avoid submitting personally identifying information about yourself when creating Avatars you plan to make available to others.
6. YOUR RIGHTS AND CHOICES
6.1 Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal information:
•
Access: Request information about and a copy of the personal data we hold about you
•
Portability: Receive your data in a portable, machine readable format
•
Correction: Update or correct inaccurate information
•
Deletion: Request deletion of your personal data (subject to legal retention requirements and the technical limitations described in Section 2.3)
•
Objection: Object to certain processing of your personal data
•
Restriction: Request that we restrict how we process certain personal data
•
Withdraw Consent: Withdraw consent for processing where consent was the legal basis
•
Opt Out of Sale/Sharing: Opt out of sales of personal information or targeted advertising
•
Opt Out of AI Training: We do not train AI models on your content today; this right lets you opt out in advance of any future training program before it begins
•
Automated Decision Explanations: Request explanations of automated processing
•
Appeal: Appeal any decision by Bae-i relating to your rights
•
Non Discrimination: Not be discriminated against for exercising your rights
Please note that certain information may be exempt from such requests under applicable law. We may need certain information to provide the Services; if you ask us to delete it, you may no longer be able to use the Services.
6.2 Exercising Your Rights
You may delete your account through your account profile page. You may also verify, correct, update, or delete certain information through your account settings.
To exercise other rights, contact us at legal@baei.ai or visit our Privacy Center.
To protect your privacy and security, we take reasonable steps to verify your identity before granting requests. If we cannot verify your identity, we may be unable to respond to your request.
You may designate an authorized agent to make requests on your behalf. We may require you to directly verify your identity and confirm the agent’s authorization.
6.3 Marketing Opt Out
Unsubscribe from promotional emails via the link in messages or through your account settings.
6.4 Global Privacy Control
Bae-i does not currently process browser-based Global Privacy Control (GPC) signals automatically. To submit an opt out of sale/sharing or sensitive personal information request, contact legal@baei.ai or use the request methods described in our Privacy Center.
6.5 Do Not Track
We do not currently respond to browser Do Not Track signals.
7. DATA SECURITY
7.1 Security Measures
We use administrative, technical, and physical safeguards to protect information, including:
•
Encryption in transit (TLS) and at rest
•
Access controls and authentication systems
•
Security monitoring and incident response
•
Isolation of sensitive data
•
Employee training and access limits
•
Secure data centers and managed cloud infrastructure
•
Principle of least privilege for employee and contractor access
•
Logging and monitoring of all access to personal data
7.2 Incident Response
In case of a data breach affecting your information, we will notify you and relevant regulators within 72 hours as required by law.
7.3 Your Responsibilities
•
Keep login credentials secure
•
Report suspicious activity
•
Avoid sharing sensitive personal information in avatar conversations that you would not want stored
8. INTERNATIONAL TRANSFERS
Data may be transferred to and processed in:
•
Countries where our service providers operate
•
Jurisdictions with different privacy laws
We use approved legal mechanisms for international transfers, including:
•
EU U.S. Data Privacy Framework
•
UK Extension to the EU U.S. Data Privacy Framework
•
Swiss U.S. Data Privacy Framework
•
Standard Contractual Clauses
•
Other lawful transfer mechanisms with appropriate technical and organizational safeguards
Where we rely on Standard Contractual Clauses, we implement supplementary technical and organizational measures to ensure an equivalent level of data protection.
Bae-i, Inc. is subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission (FTC).
For more information about international transfers, please visit our Privacy Center.
9. VISITORS
When you browse our sites, use our mobile apps, or access our Services without an account, we collect information provided directly by you and through cookies and similar technologies.
If you complete forms on our website or third party platforms where our ads appear (such as LinkedIn or Facebook), we collect the information you submit, which may include contact information and questions about our Services.
We use visitor information to:
•
Personalize: Measure engagement, improve relevance, customize your experience, and tailor content
•
Advertise: Where permitted by law (and with consent where required), we use and share visitor information to advertise and market our Services
•
Engage: Provide opportunities for interactions, discussions, and responses to your questions
We do not transfer your Personal Data to third parties in exchange for payment, but we may provide data to advertising partners, analytics providers, and social networks who assist us in advertising our Services.
10. THIRD PARTY SERVICES
If you use a third party app, service, or integration that connects with Bae-i, that service may receive certain information necessary for the integration to function (such as account verification, basic profile attributes, or media you choose to transfer).
Third parties operate under their own terms and privacy policies. We encourage you to review them before connecting accounts or sharing information.
Our platform may contain links to third party sites. We are not responsible for their privacy practices.
11. CHILDREN’S PRIVACY
Bae-i is not intended for children under 18. We do not knowingly collect personal data from minors. If we learn that a user is under 18, we will take reasonable steps to delete that account and all associated information.
Because the Services are limited to adults, we do not knowingly process sensitive personal information of minors, including consumers under 16 referenced in California law. See Section 13.1 for additional California disclosures.
We comply with the U.S. Children’s Online Privacy Protection Act (COPPA) and apply the higher age standard where jurisdictional rules differ.
12. AI SPECIFIC CONSIDERATIONS
12.1 Training Data
We do not train AI models on user conversations or interaction data. Dedicated creator models are built only from content creators intentionally provide under their Creator Licensing Agreement. See Section 2.3 for detailed information about how our AI systems use data.
12.2 Conversation Memory
Conversations accumulate memory across sessions with the same avatar. After multiple sessions, AI may summarize accumulated context. Memory is specific to each avatar and session type. You can clear conversation history at any time (see Section 4.4).
12.3 AI Decision Making
AI determines avatar responses in real time. AI evaluates conversation quality for service improvement. No fully automated decisions affecting your legal rights are made without human oversight. Appeals for account enforcement actions are reviewed by our team.
12.4 AI Limitations
AI may produce inaccurate or outdated information. Avatars are AI representations, not actual people. AI generated responses should not be relied upon for professional, legal, medical, or financial advice.
13. REGIONAL PRIVACY DISCLOSURES
Depending on where you live, you may have specific rights or additional information may apply.
13.1 United States
•
Categories Collected: Identifiers; California customer records information; commercial information; internet or other electronic network activity; coarse geolocation derived from IP address or similar network metadata; audio, electronic, or visual information; biometric information; professional or employment information we collect from creators or applicants; and inferences
•
Sources: Direct from you, automatic collection, third parties
•
Purposes: As described in Section 2
•
Sensitive Personal Information: We may collect sensitive personal information such as account log-in credentials, the contents of your communications with avatars or support, biometric information, and coarse geolocation inferred from IP or similar network metadata. We do not collect precise device GPS location, and we do not use or disclose sensitive personal information for cross-context behavioral advertising or for inferring characteristics beyond what is necessary to provide the Services, maintain security, detect fraud, or comply with law
•
Sale/Sharing: We do not sell personal information for monetary consideration. We may disclose identifiers and online activity to advertising or analytics partners in ways that may constitute “sharing” under California law. Because the Services are not intended for anyone under 18, we do not knowingly process sensitive personal information of consumers under 16, and we do not knowingly sell or share personal information of consumers under 16. See Section 11.
•
Do Not Sell or Share: To submit an opt out request, contact legal@baei.ai or use the request methods described in our Privacy Center.
•
Paid Services Disclosure: Paid subscriptions, token purchases, and paid avatar interactions are ordinary commercial transactions. Bae-i does not offer credits, discounts, or feature access in exchange for allowing AI training use of personal information you could otherwise decline.
•
Rights: Know, delete, correct, opt out of sale/sharing, limit sensitive data use, non discrimination, appeal
Shine the Light: California residents may request the names of third parties to which we disclosed personal information for direct marketing purposes. Send requests to legal@baei.ai with “Shine the Light Request” in the subject line.
California AB 2013 (AI Training Data Disclosure)
In compliance with California Assembly Bill 2013 (effective January 1, 2026), we provide the following disclosures regarding data used to train our artificial intelligence systems:
•
Creator provided content (videos, audio, documents, images) licensed directly from creators under Creator Licensing Agreements
•
User conversation and interaction data (with personal information minimized or anonymized)
•
Publicly available datasets and conversational corpora
Licensing and Copyright Status:
•
All creator content is used under express written license agreements
•
Creators retain ownership of their original content and grant Bae-i rights for AI training, format conversion, and derivative works
•
We do not use copyrighted content without authorization
•
We may collect creator-authorized content from creator-provided public URLs, feeds, newsletters, channels, accounts, and supported integrations, but we do not bypass access controls or access private or restricted content without authorization and legal permission
Data Collection Timeframes:
•
Creator training data: Collected on an ongoing basis from creators who join the platform
•
User interaction data for model improvement: Collected during platform operation since launch
•
Historical training data records are maintained for regulatory compliance
For detailed information about our AI training practices, including technical limitations and opt out rights, see Section 2.3 of this Privacy Policy and our AI Disclosure Policy in our Privacy Center.
Nevada Residents: You have the right to opt out of sale of personal information for monetary consideration. While we do not currently engage in such sales, you may submit an opt out request to legal@baei.ai.
Vermont Residents: We will not disclose information about your creditworthiness to affiliates or share personal, financial, credit, or health information with non affiliated third parties to market to you, unless you authorize such disclosures.
Illinois, Texas, Washington: See Section 1.7 for biometric specific rights.
13.2 European Economic Area and United Kingdom (GDPR/UK GDPR)
Legal Bases for Processing:
•
Consent: Where you have provided clear, informed consent for specific processing
•
Contractual Necessity: Where processing is necessary to perform our contract with you
•
Legitimate Interests: Where processing is necessary for our legitimate interests (such as improving Services, ensuring security, detecting abuse) and these interests are not overridden by your fundamental rights
•
Legal Obligation: Where processing is necessary for compliance with applicable laws
•
Vital Interests: Where processing is necessary to protect your vital interests or those of another person
Where required by law, we will request your consent before processing special categories of data (such as biometric data).
Data Controller: Baei Inc.
Privacy Contact: legal@baei.ai
DPO Status: Bae-i has not appointed a statutory Data Protection Officer at this time. We review this assessment periodically and before any material expansion of biometric or large-scale monitoring activities.
EU/UK Representative: Contact details available at our Privacy Center.
Rights: Access, rectification, erasure, portability, objection, restriction, withdraw consent, automated decision review.
Complaints: You may lodge complaints with your local data protection authority. For EEA residents, contact the Irish Data Protection Commission. For UK residents, contact the UK Information Commissioner’s Office.
EU AI Act Transparency (Regulation 2024/1689)
In compliance with the EU Artificial Intelligence Act transparency requirements applicable from August 2, 2025, we provide the following information regarding our AI systems:
Training Data Summary:
Our AI avatar systems are trained on:
•
Licensed content from creators, including video, audio, text, and image materials obtained under written Creator Licensing Agreements
•
Anonymized user conversation and interaction data
•
Publicly available conversational datasets and corpora
•
All creator content used for training is obtained under express written license agreements
•
We maintain records of content provenance and licensing status
•
Creators warrant ownership or proper licensing of content they provide under their Creator Licensing Agreements
•
We do not use unauthorized or scraped content for AI training
Technical Documentation:
Additional technical documentation regarding our AI systems, including model capabilities and limitations, is available upon request to regulatory authorities. Contact: legal@baei.ai
•
AI generated avatar responses are monitored for quality and safety through automated systems
•
Content moderation systems review interactions for policy violations
•
Human review is available for account enforcement appeals (see Section 2.4)
•
Creator approval is required before avatar activation on the platform
13.3 Australia
“Personal Data” includes “personal information” as defined under the Privacy Act 1988 (Cth).
Bae-i complies with the Australian Privacy Principles (“APPs”) contained in the Privacy Act 1988 (Cth). Personal information may be transferred to the United States or other jurisdictions where our infrastructure or service providers operate. In accordance with APP 8, we take reasonable steps to ensure overseas recipients handle personal information in a manner consistent with the APPs.
Under APP 6, we use and disclose personal information only for the purposes described in this Privacy Policy or for purposes reasonably related to those primary purposes.
We also acknowledge the statutory tort for serious invasions of privacy introduced under the Privacy and Other Legislation Amendment Act 2024 and implement safeguards designed to prevent misuse of personal, biometric, or audiovisual data.
If we use personal information to make automated decisions that could reasonably be expected to significantly affect your rights or interests, we will provide the legally required information and transparency through our Privacy Center and/or on a case-by-case basis.
Complaints: Contact the Office of the Australian Information Commissioner at GPO Box 5288, Sydney, NSW 2000.
13.4 Brazil (LGPD)
Brazilian residents have rights under Article 18 of the Lei Geral de Proteção de Dados Pessoais, including confirmation of processing, access, correction, anonymization, portability, deletion, and information about sharing.
Contact us at legal@baei.ai to exercise your rights.
13.5 Canada (PIPEDA/Provincial Laws)
“Personal Data” includes “personal information” as defined under PIPEDA, British Columbia’s PIPA, Alberta’s PIPA, and Quebec’s Private Sector Act.
When Bae-i collects Personal Information from Canadian residents, it may be transferred to data centers in the United States.
Rights: Access, correction, withdrawal of consent.
13.6 India (DPDPA)
We process personal information in accordance with the Digital Personal Data Protection Act. We may rely on “legitimate use” as a legal basis where permitted, such as when you voluntarily provide information. Where explicit consent is required, we will obtain it.
You have the right to nominate another individual to exercise your rights in the event of your death or incapacity.
Complaints: You may escalate unresolved matters to the Data Protection Board of India.
13.7 Japan (APPI)
When we transfer Personal Information to jurisdictions not recognized as adequate by the Personal Information Protection Commission, we enter into written agreements providing equivalent protections.
13.8 Singapore (PDPA)
We may rely on “deemed consent” where permitted, such as when you voluntarily provide Personal Data.
13.9 Switzerland (FADP)
To exercise your rights under the Swiss Federal Act on Data Protection, contact legal@baei.ai. You may also have rights under the Swiss U.S. Data Privacy Framework.
13.10 Other Jurisdictions
We comply with applicable privacy laws in all jurisdictions where we operate, including but not limited to Indonesia, Japan, Malaysia, Thailand, Israel, Turkey, Saudi Arabia, and the United Arab Emirates.
For jurisdiction specific information, please visit our Privacy Center or contact legal@baei.ai.
14. CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time. We will indicate the date of the most recent update at the top of this Policy.
For material changes, we will provide notice through the Services or by email. Where legally required, we will provide advance notice before changes take effect and obtain your consent before material changes that expand how we collect or use previously collected Personal Data.
Continued use of the Services after changes take effect means you acknowledge the updated Policy.
15. CONTACT US
Privacy Inquiries
Legal Inquiries
General Support
Mailing Address
Baei Inc.
251 Little Falls Drive, Wilmington, County of New Castle, 19808 Delaware USA
Complaints
You may lodge complaints with your local data protection authority. Contact information for relevant authorities is available at our Privacy Center.
This Privacy Policy is incorporated into and subject to our Terms of Service.
